Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    12-09-2024 22:58

General

  • Target

    dd32917dc219e0522d721c3630c53374_JaffaCakes118.exe

  • Size

    135KB

  • MD5

    dd32917dc219e0522d721c3630c53374

  • SHA1

    8e4323b443ddc1677ffcf0bfe792d2bc81b60424

  • SHA256

    ee6acd9eb9f36117188ea01b379f78195abd5e68800b4f307b6b439071062994

  • SHA512

    fdc3d8bcaf6beb5e5678720adbbda0adde426cdc1272ec3d364fe5076c36451f179f37803f707db0cfec50175dabcf5b9b4e1f23de05b3c408bd606fb1925adf

  • SSDEEP

    1536:R1MYOnZApGVsJ+3pxuCcjpgv4vKJ0pcnSANSSsWjcdSp2Re+BizJgVmzbxdn:RrSULypxXcR00OSVdSme+BizJ5zbxdn

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\dd32917dc219e0522d721c3630c53374_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\dd32917dc219e0522d721c3630c53374_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1744

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1744-1-0x0000000002FF0000-0x0000000002FF1000-memory.dmp

    Filesize

    4KB